mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
61 lines
1.4 KiB
YAML
61 lines
1.4 KiB
YAML
---
|
|
|
|
- name: "3.3.1 | L2 | PATCH | Ensure DCCP is disabled"
|
|
lineinfile:
|
|
dest: /etc/modprobe.d/CIS.conf
|
|
regexp: "^(#)?install dccp(\\s|$)"
|
|
line: "install dccp /bin/true"
|
|
create: true
|
|
mode: 0600
|
|
when:
|
|
- rhel9cis_rule_3_3_1
|
|
tags:
|
|
- level2-server
|
|
- level2-workstation
|
|
- patch
|
|
- rule_3.3.1
|
|
|
|
- name: "3.3.2 | L2 | PATCH | Ensure SCTP is disabled"
|
|
lineinfile:
|
|
dest: /etc/modprobe.d/CIS.conf
|
|
regexp: "^(#)?install sctp(\\s|$)"
|
|
line: "install sctp /bin/true"
|
|
create: true
|
|
mode: 0600
|
|
when:
|
|
- rhel9cis_rule_3_3_2
|
|
tags:
|
|
- level2-server
|
|
- level2-workstation
|
|
- patch
|
|
- rule_3.3.2
|
|
|
|
- name: "3.3.3 | L2 | PATCH | Ensure RDS is disabled"
|
|
lineinfile:
|
|
dest: /etc/modprobe.d/CIS.conf
|
|
regexp: "^(#)?install rds(\\s|$)"
|
|
line: "install rds /bin/true"
|
|
create: true
|
|
mode: 0600
|
|
when:
|
|
- rhel9cis_rule_3_3_3
|
|
tags:
|
|
- level2-server
|
|
- level2-workstation
|
|
- patch
|
|
- rule_3.3.3
|
|
|
|
- name: "3.3.4 | L2 | PATCH | Ensure TIPC is disabled"
|
|
lineinfile:
|
|
dest: /etc/modprobe.d/CIS.conf
|
|
regexp: "^(#)?install tipc(\\s|$)"
|
|
line: "install tipc /bin/true"
|
|
create: true
|
|
mode: 0600
|
|
when:
|
|
- rhel9cis_rule_3_3_4
|
|
tags:
|
|
- level2-server
|
|
- level2-workstation
|
|
- patch
|
|
- rule_3.3.4
|